OS Simulator crash: EXC_BAD_ACCESS SIGKILL Code Signature Invalid on Xcode 26.5 + macOS 26.5

### Description

i'am still getting crash while testing dotnetmaui my app, here is my environment info and crash report @shanselman

macOS Tahoe 26.5, macOS Rider 2026.1.2

dotnet workload list

Workload version: 10.0.300.3

Installed Workload Id Manifest Version Installation Source
-----------------------------------------------------------------------
ios 26.5.10284/10.0.100 SDK 10.0.300
maccatalyst 26.5.10284/10.0.100 SDK 10.0.300
maui-android 10.0.20/10.0.100 SDK 10.0.300
maui-ios 10.0.20/10.0.100 SDK 10.0.300

xcodebuild -version
Xcode 26.5
Build version 17F42

//crash report
{"app_name":"XsentiusMaui","timestamp":"2026-06-06 12:01:45.00 +0300","app_version":"1.0.0","slice_uuid":"c2d49931-d597-33d2-a57b-9b1664a8a5ba","build_version":"100","platform":7,"bundleID":"com.cozbim.xsentiusmobile","share_with_app_devs":0,"is_first_party":0,"bug_type":"309","os_version":"macOS 26.5 (25F71)","roots_installed":0,"name":"XsentiusMaui","incident_id":"503BC75C-6377-45D7-A32E-91FD937FF065"}
{
"uptime" : 310000,
"procRole" : "Foreground",
"version" : 2,
"userID" : 501,
"deployVersion" : 210,
"modelCode" : "Mac16,1",
"coalitionID" : 38825,
"osVersion" : {
"train" : "macOS 26.5",
"build" : "25F71",
"releaseType" : "User"
},
"captureTime" : "2026-06-06 12:01:44.8880 +0300",
"codeSigningMonitor" : 2,
"incident" : "503BC75C-6377-45D7-A32E-91FD937FF065",
"pid" : 75846,
"translated" : false,
"cpuType" : "ARM-64",
"procLaunch" : "2026-06-06 12:01:44.7792 +0300",
"procStartAbsTime" : 7591044433536,
"procExitAbsTime" : 7591046501207,
"procName" : "XsentiusMaui",
"procPath" : "\/Users\/USER\/Library\/Developer\/CoreSimulator\/Devices\/CFA4B58F-AC1D-44AB-B4CC-1283510D2950\/data\/Containers\/Bundle\/Application\/EC1AF5CC-8ED0-4C1D-89A7-DF45020C55F1\/XsentiusMaui.app\/XsentiusMaui",
"bundleInfo" : {"CFBundleShortVersionString":"1.0.0","CFBundleVersion":"100","CFBundleIdentifier":"com.cozbim.xsentiusmobile"},
"storeInfo" : {"deviceIdentifierForVendor":"9AD60E52-BF7C-56D1-AF20-92890E7DB4C0","thirdParty":true},
"parentProc" : "launchd_sim",
"parentPid" : 58549,
"coalitionName" : "com.apple.CoreSimulator.SimDevice.CFA4B58F-AC1D-44AB-B4CC-1283510D2950",
"crashReporterKey" : "307E060A-0B57-9A0D-D769-4CCF07BED703",
"appleIntelligenceStatus" : {"state":"unavailable","reasons":["notOptedIn","assetIsNotReady"]},
"developerMode" : 1,
"responsiblePid" : 25963,
"responsibleProc" : "SimulatorTrampoline",
"codeSigningID" : "XsentiusMaui",
"codeSigningTeamID" : "",
"codeSigningFlags" : 587334144,
"codeSigningValidationCategory" : 0,
"codeSigningTrustLevel" : 4294967295,
"codeSigningAuxiliaryInfo" : 0,
"instructionByteStream" : {"beforePC":"+mcEqfhfBan2Vwap9E8Hqf17CKn9AwKR9QMBqvQDAKrzAwiq\/\/8AOQ==","atPC":"CABAuelZn1Kp3b9yHwEJa+AAAFTJWZ9Sqd2\/ch8BCWsBBQBUiQOAUg=="},
"bootSessionUUID" : "9C9A0562-689D-4456-AAE3-34221D697053",
"wakeTime" : 2198,
"sleepWakeUUID" : "C32645CC-2A39-42BD-9269-730623C402A2",
"sip" : "enabled",
"vmRegionInfo" : "0x105620000 is in 0x105620000-0x1056c0000; bytes after start: 0 bytes before end: 655359\n REGION TYPE START - END [ VSIZE] PRT\/MAX SHRMOD REGION DETAIL\n mapped file 105600000-105620000 [ 128K] r--\/rwx SM=COW Object_id=e003fa51\n---> mapped file 105620000-1056c0000 [ 640K] r--\/rwx SM=COW Object_id=25d71ba2\n GAP OF 0x2d4000 BYTES\n mapped file 105994000-105c48000 [ 2768K] r-x\/rwx SM=COW Object_id=ab2065b6",
"exception" : {"codes":"0x0000000000000032, 0x0000000105620000","rawCodes":[50,4385275904],"type":"EXC_BAD_ACCESS","signal":"SIGKILL (Code Signature Invalid)","subtype":"UNKNOWN_0x32 at 0x0000000105620000"},
"termination" : {"flags":0,"code":2,"namespace":"CODESIGNING","indicator":"Invalid Page"},
"vmregioninfo" : "0x105620000 is in 0x105620000-0x1056c0000; bytes after start: 0 bytes before end: 655359\n REGION TYPE START - END [ VSIZE] PRT\/MAX SHRMOD REGION DETAIL\n mapped file 105600000-105620000 [ 128K] r--\/rwx SM=COW Object_id=e003fa51\n---> mapped file 105620000-1056c0000 [ 640K] r--\/rwx SM=COW Object_id=25d71ba2\n GAP OF 0x2d4000 BYTES\n mapped file 105994000-105c48000 [ 2768K] r-x\/rwx SM=COW Object_id=ab2065b6",
"extMods" : {"caller":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"system":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"targeted":{"thread_create":0,"thread_set_state":0,"task_for_pid":0},"warnings":0},
"faultingThread" : 0,
"threads" : [{"triggered":true,"id":7798497,"threadState":{"x":[{"value":4385275904},{"value":6091648712},{"value":1},{"value":262146},{"value":3},{"value":0},{"value":4381331780,"symbolLocation":0,"symbol":"mmap"},{"value":0},{"value":6091648792},{"value":4380579300,"symbolLocation":0,"symbol":"invocation function for block in mach_o::UnsafeHeader::forEachSegment(void (mach_o::UnsafeHeader::SegmentInfo const&, bool&) block_pointer) const"},{"value":4380658312,"symbolLocation":8,"symbol":"__block_descriptor_tmp.292"},{"value":70},{"value":59},{"value":52},{"value":9656008738},{"value":3},{"value":197},{"value":4381327200,"symbolLocation":56,"symbol":"fcntl"},{"value":0},{"value":6091648792},{"value":4385275904},{"value":6091648712},{"value":6091655312},{"value":0},{"value":0},{"value":4385275904},{"value":6091652064},{"value":4385275904},{"value":1}],"flavor":"ARM_THREAD_STATE64","lr":{"value":4380578912},"cpsr":{"value":0},"fp":{"value":6091648688},"sp":{"value":6091648560},"esr":{"value":2449473543,"description":"(Data Abort) byte read Translation fault"},"pc":{"value":4380567936,"matchesCrashFrame":1},"far":{"value":4385275904}},"frames":[{"imageOffset":256384,"symbol":"mach_o::UnsafeHeader::forEachLoadCommand(void (load_command const*, bool&) block_pointer) const","symbolLocation":44,"imageIndex":1},{"imageOffset":267360,"symbol":"mach_o::UnsafeHeader::forEachSegment(void (mach_o::UnsafeHeader::SegmentInfo const&, bool&) block_pointer) const","symbolLocation":96,"imageIndex":1},{"imageOffset":264708,"symbol":"mach_o::UnsafeHeader::preferredLoadAddress() const","symbolLocation":96,"imageIndex":1},{"imageOffset":112364,"symbol":"dyld4::JustInTimeLoader::withRegions(dyld3::MachOFile const*, void (dyld3::Array const&) block_pointer)","symbolLocation":48,"imageIndex":1},{"imageOffset":114576,"symbol":"dyld4::JustInTimeLoader::makeJustInTimeLoaderDisk(Diagnostics&, dyld4::RuntimeState&, char const*, dyld4::Loader::LoadOptions const&, bool, unsigned int, mach_o::Layout const*)","symbolLocation":1124,"imageIndex":1},{"imageOffset":125964,"symbol":"invocation function for block in dyld4::Loader::getLoader(Diagnostics&, dyld4::RuntimeState&, char const*, dyld4::Loader::LoadOptions const&)","symbolLocation":3592,"imageIndex":1},{"imageOffset":120564,"symbol":"dyld4::Loader::forEachResolvedAtPathVar(dyld4::RuntimeState&, char const*, dyld4::Loader::LoadOptions const&, dyld4::ProcessConfig::PathOverrides::Type, bool&, void (char const*, dyld4::ProcessConfig::PathOverrides::Type, bool&) block_pointer)","symbolLocation":468,"imageIndex":1},{"imageOffset":67176,"symbol":"dyld4::ProcessConfig::PathOverrides::forEachPathVariant(char const*, mach_o::Platform, bool, bool, bool&, void (char const*, dyld4::ProcessConfig::PathOverrides::Type, bool&) block_pointer) const","symbolLocation":508,"imageIndex":1},{"imageOffset":119672,"symbol":"dyld4::Loader::forEachPath(Diagnostics&, dyld4::RuntimeState&, char const*, dyld4::Loader::LoadOptions const&, void (char const*, dyld4::ProcessConfig::PathOverrides::Type, bool&) block_pointer)","symbolLocation":236,"imageIndex":1},{"imageOffset":121456,"symbol":"dyld4::Loader::getLoader(Diagnostics&, dyld4::RuntimeState&, char const*, dyld4::Loader::LoadOptions const&)","symbolLocation":828,"imageIndex":1},{"imageOffset":106188,"symbol":"invocation function for block in dyld4::JustInTimeLoader::loadDependents(Diagnostics&, dyld4::RuntimeState&, dyld4::Loader::LoadOptions const&)","symbolLocation":476,"imageIndex":1},{"imageOffset":263848,"symbol":"invocation function for block in mach_o::UnsafeHeader::forEachLinkedDylib(void (char const*, mach_o::LinkedDylibAttributes, mach_o::Version32, mach_o::Version32, bool, bool&) block_pointer) const","symbolLocation":128,"imageIndex":1},{"imageOffset":256540,"symbol":"mach_o::UnsafeHeader::forEachLoadCommand(void (load_command const*, bool&) block_pointer) const","symbolLocation":200,"imageIndex":1},{"imageOffset":263156,"symbol":"mach_o::UnsafeHeader::forEachLinkedDylib(void (char const*, mach_o::LinkedDylibAttributes, mach_o::Version32, mach_o::Version32, bool, bool&) block_pointer) const","symbolLocation":144,"imageIndex":1},{"imageOffset":105452,"symbol":"dyld4::JustInTimeLoader::loadDependents(Diagnostics&, dyld4::RuntimeState&, dyld4::Loader::LoadOptions const&)","symbolLocation":136,"imageIndex":1},{"imageOffset":46172,"symbol":"dyld4::prepare(dyld4::APIs&, mach_o::UnsafeHeader const*)","symbolLocation":712,"imageIndex":1},{"imageOffset":45144,"symbol":"_dyld_sim_prepare","symbolLocation":856,"imageIndex":1},{"imageOffset":139292,"symbol":"dyld4::prepareSim(dyld4::RuntimeState&, char const*)","symbolLocation":1300,"imageIndex":2},{"imageOffset":132540,"symbol":"dyld4::prepare(dyld4::APIs&, mach_o::UnsafeHeader const*)","symbolLocation":340,"imageIndex":2},{"imageOffset":132172,"symbol":"dyld4::start(dyld4::KernelArgs*, void*, void*, unsigned long long)::$_1::operator()() const","symbolLocation":320,"imageIndex":2},{"imageOffset":130472,"symbol":"start","symbolLocation":6904,"imageIndex":2}]}],
"usedImages" : [
{
"source" : "P",
"arch" : "arm64",
"base" : 4375216128,
"CFBundleShortVersionString" : "1.0.0",
"CFBundleIdentifier" : "com.cozbim.xsentiusmobile",
"size" : 1638400,
"uuid" : "c2d49931-d597-33d2-a57b-9b1664a8a5ba",
"path" : "\/Users\/USER\/Library\/Developer\/CoreSimulator\/Devices\/CFA4B58F-AC1D-44AB-B4CC-1283510D2950\/data\/Containers\/Bundle\/Application\/EC1AF5CC-8ED0-4C1D-89A7-DF45020C55F1\/XsentiusMaui.app\/XsentiusMaui",
"name" : "XsentiusMaui",
"CFBundleVersion" : "100"
},
{
"source" : "P",
"arch" : "arm64",
"base" : 4380311552,
"size" : 327680,
"uuid" : "ba544d9a-46ab-3c59-a00f-aba1479d2079",
"path" : "\/Volumes\/VOLUME\/*\/dyld_sim",
"name" : "dyld_sim"
},
{
"source" : "P",
"arch" : "arm64e",
"base" : 4381310976,
"size" : 688128,
"uuid" : "a237ef81-b68b-37ba-a165-92c965529534",
"path" : "\/usr\/lib\/dyld",
"name" : "dyld"
},
{
"size" : 0,
"source" : "A",
"base" : 0,
"uuid" : "00000000-0000-0000-0000-000000000000"
}
],
"vmSummary" : "ReadOnly portion of Libraries: Total=5424K resident=0K(0%) swapped_out_or_unallocated=5424K(100%)\nWritable regions: Total=8560K written=128K(1%) resident=128K(1%) swapped_out=0K(0%) unallocated=8432K(99%)\n\n VIRTUAL REGION \nREGION TYPE SIZE COUNT (non-coalesced) \n=========== ======= ======= \nSTACK GUARD 56.0M 1 \nStack 8176K 1 \nVM_ALLOCATE 16K 1 \nVM_ALLOCATE (reserved) 96K 1 reserved VM address space (unallocated)\n__AUTH_CONST 32K 1 \n__DATA 672K 5 \n__DATA_CONST 64K 3 \n__DATA_DIRTY 32K 2 \n__LINKEDIT 2832K 3 \n__TEXT 2592K 3 \n__TPRO_CONST 160K 2 \ndyld private memory 3.0G 5 \nmapped file 3.0G 39 \npage table in kernel 128K 1 \n=========== ======= ======= \nTOTAL 6.1G 68 \nTOTAL, minus reserved VM space 6.1G 68 \n",
"legacyInfo" : {
"threadTriggered" : {

}
},
"logWritingSignature" : "49d67ad0b3e737b5c29da192775215acbe1f9282",
"bug_type" : "309",
"roots_installed" : 0,
"trmStatus" : 1,
"trialInfo" : {
"rollouts" : [
{
"rolloutId" : "63508950b3714d3622fc77f7",
"factorPackIds" : [
"6526e111d0c9ce2f459b54a8"
],
"deploymentId" : 240000015
},
{
"rolloutId" : "699d4a6bb3c59721f0815d4a",
"factorPackIds" : [
"6a1e847dfae8a60fe3d88f20",
"6a1e847ffae8a60fe3d88f21",
"6a1e847fe5700036461dd986",
"6a1e848059a97e607a107573"
],
"deploymentId" : 240000033
}
],
"experiments" : [

]
},
"reportNotes" : [
"dyld_process_snapshot_get_shared_cache failed"
]
}

### Steps to Reproduce

_No response_

### Link to public reproduction project repository

_No response_

### Version with bug

10.0.30

### Is this a regression from previous behavior?

Yes, this used to work in .NET MAUI

### Last version that worked well

_No response_

### Affected platforms

iOS

### Affected platform versions

_No response_

### Did you find any workaround?

_No response_

### Relevant log output

```shell

```

Start by reproducing the crash with the listed .NET workload, Xcode 26.5, and macOS 26.5 versions, then inspect the attached crash report from CoreSimulator and its dyld_sim frames. Done means the failure is reproducible and its cause is identified with supporting evidence.

Written by the indexing model from the issue text.